Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
0284e7f782b397d88def3109be101147.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0284e7f782b397d88def3109be101147.exe
Resource
win10v2004-20231215-en
Target
0284e7f782b397d88def3109be101147
Size
185KB
MD5
0284e7f782b397d88def3109be101147
SHA1
7ab7233f40712a61c78715623d57de8d225a7d6d
SHA256
e4567212ca6aa10e556016d9f23781439576bbf1b98bd5d928734ce12974ef2d
SHA512
c9a323722f0c592305f395a1784de74a1597ab8a51387e53deb50a239c7282265414edebb557503bb7f7094c6b5190a7ea903912be15ea63eaf3302f4a47e059
SSDEEP
3072:WVL/TnqMa4/08IuyUkNoCu5qDqVdc72+Q5CMCC8DPN5z7bIA31TzMei/BAg:ezqMamIudsc5qqcC+axwPNd0AFTzM3/J
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ